Only soft-deprecate passwords in config
Tests for soft-deprecating passwords in config